Your work stays yours.

Information used

• Account identity and access status.
• Workout starts, completions, program progress, and member-entered sets, repetitions, load, rest and training notes.
• Member-entered readiness, body-weight, body-measurement, recovery and Nutrition observations where those features are available to the account.
• Support, export, deletion, and payment-status records.
• Questions and responses used in the in-app floor-coach conversation.

Why RWR uses it

RWR uses this information to authenticate your account, deliver the program you can access, preserve progress, answer bounded training questions, resolve support issues, and honor privacy requests. Manual health observations support your progress record; they do not produce a diagnosis, medical clearance, or automatic program change.

Services that process it

RWR controls the member experience and operating decisions. Vercel delivers the hosted service and Supabase provides account authentication and protected data storage. When the security check is enabled, Cloudflare Turnstile processes the check used for sign-in and Help requests. Available movement media may load from Mux when you open it, and that media request reaches the provider from your device. YouTube demonstrations use explicit links: choosing one opens YouTube outside RWR, where YouTube may show ads and uses its own privacy controls. Public links can open an external website with its own privacy practices. Stripe handles payment and billing events when separately enabled; current account history may include previously recorded payment status. Purchasing is off in the current native release. RWR does not receive full card numbers or device biometrics through these member flows.

When booking is enabled, RWR uses its business Google Calendar to check your coach’s availability and create, change or cancel the appointments you request and accept. Google receives your name, email address, service, date, time, time zone, joining or location details and a booking reference; Calendar invitations and updates go to your attendee email. When booking emails are enabled, RWR uses its business Gmail account for time offers, confirmations and cancellations, and checks matching Sent messages and their addressing headers to avoid duplicate sends. These are RWR’s connected accounts; you do not need to connect a personal Google account to book.

Your controls

You can request a copy of your member data or ask to delete your account from Help after signing in. Submitting a request records it for review; it does not delete the account immediately. You can check its status in Help. We acknowledge deletion requests within two business days. After identity verification, we complete account deletion within 30 calendar days. We explain any records that are legally retained and why. Deletion removes the account and associated member data after identity verification, except records RWR must retain for law, security, fraud prevention, or financial reconciliation. If you cannot sign in, the account-deletion page explains the contact route.

Open the account-deletion route.

Retention and security

RWR keeps member records only for delivery, support, safety, recovery, and required business records. Access is scoped to the signed-in member and RWR’s authorized operating roles. Browser sessions use protected cookies; passwords and provider secret keys are not stored in browser storage.

Questions or corrections

Contact RWR at mftmorales@rockinwitreemo.com. Do not send a password, full card number, or other sign-in secret by email.